What the reviewer found
SSH setup skill for a user's own embedded compile board: it appends the user's freshly generated public key to that device's authorized_keys (a dedicated, never-overwritten key, standard passwordless-SSH setup, not reading or exfiltrating any secret) and the rm -rf only clears a /tmp install staging directory. The sudo mention is documentation of the installer's own permission check, not a request for root here.
installs-software— installs softwarenetwork— calls the vendor’s API
What was read
The file as it ships in smk-h/embedded-mcp-toolkit:
.claude/skills/setup-file-utils-remote/SKILL.md
What the static scan said
The scan flagged 3things. The reviewer kept 0 and dismissed 3 as false.
PE2Asks for root — false positivePE3Reaches for credential files — false positiveRMRecursive force delete — false positive
How this review was made
Sonnet 5 read the files above on 7 September 2026 and answered three questions: is it dangerous to whoever installs it, is each scanner finding real, and what should the installer know. The verdict is bound to the file's hash; when the file changes, it is scanned afresh and reviewed again. A script that changes while the definition does not is not re-reviewed — that is a known gap. How the scan and the review work.